Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.mft (raw, json)
Hash identifier: fnAae6PQAf59cvOdx55UoHT2Ps5QaBfKczs56vq52Aw=
Subject key identifier: BD:33:96:3C:14:52:25:C5:3C:7F:9C:A8:AA:E6:C7:4E:23:A4:51:A5
Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
Certificate issuer: /CN=f521e174f84f7165961d41b68ea7262e28337d69
Certificate serial: 0199FC21D97810529BCEF5EB454B0950D53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
Manifest number: 63
Signing time: Sun 19 Oct 2025 11:01:40 +0000
Manifest this update: Sun 19 Oct 2025 11:01:40 +0000
Manifest next update: Mon 20 Oct 2025 11:01:40 +0000
Files and hashes: 1: 9SHhdPhPcWWWHUG2jqcmLigzfWk.crl (hash: g9AjBtejllBQ1fIUxDEBBmXfyqnd1jALSM0ssQu0sds=)
2: lREmYeBzk04tbp8GeH-LaDXphtg.roa (hash: zft8RW61aCX4pWyWaUhcgfulMxE/7ocT5F98zoTjm/E=)
3: yTtKVX1UAMcHekyo2zXGvrkQM1I.roa (hash: mdzZIhlGgkU8tIHOKHpSUYEIhlckxiDvx7lT5oQ6M5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:d9:78:10:52:9b:ce:f5:eb:45:4b:09:50:d5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69
Validity
Not Before: Oct 19 11:01:40 2025 GMT
Not After : Oct 20 11:01:40 2025 GMT
Subject: CN=bd33963c145225c53c7f9ca8aae6c74e23a451a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:af:42:33:4c:14:df:c8:56:25:5b:09:a6:
53:ad:1b:2c:31:f0:3c:20:13:12:cb:3a:9b:11:89:
37:5c:89:7d:cb:0d:98:77:cc:2e:e7:05:e8:d4:48:
10:5d:c3:01:40:92:47:a1:e1:6f:1e:ed:d7:1a:31:
51:8b:7d:70:24:14:cf:bf:4d:56:65:17:61:27:99:
a5:0e:c1:09:fd:d8:55:5e:49:3e:b1:5b:a2:f0:a5:
db:0c:cc:94:5b:b6:02:5a:31:38:cd:79:5d:94:8f:
a4:3e:6a:a2:67:8f:62:0f:36:93:54:52:07:e1:da:
26:af:1b:23:da:a1:60:d3:49:95:7d:88:33:42:29:
56:58:c2:12:72:76:58:26:66:c1:48:51:78:4d:20:
e9:f5:32:f3:8c:b5:8a:6b:91:a6:0c:89:39:df:d9:
92:9e:45:8a:7a:3a:24:a1:1a:f3:de:9f:25:b8:c0:
da:e5:e8:4d:4d:ab:6c:44:58:12:5c:5d:f8:78:3b:
ea:9b:98:02:5b:8c:31:bb:07:a2:d7:4f:22:47:cb:
1e:12:27:1d:ee:ca:d2:81:68:f9:89:f6:23:6d:da:
d8:e3:80:ee:d3:d8:46:4c:20:21:a1:ef:06:9c:42:
5e:e5:d2:22:bc:76:dc:62:df:95:aa:32:ef:0e:f6:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:33:96:3C:14:52:25:C5:3C:7F:9C:A8:AA:E6:C7:4E:23:A4:51:A5
X509v3 Authority Key Identifier:
keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:34:d9:bd:fb:3d:2a:aa:9f:f5:38:d5:39:a1:7b:56:ad:41:
13:3f:98:5c:0c:15:0f:d1:6a:28:28:0c:86:ce:9c:fa:40:b2:
38:fc:76:4d:9f:27:f2:cd:29:ce:73:b7:f2:fb:f4:7b:aa:6b:
5d:3a:4d:ca:72:92:ff:ff:54:f0:90:68:f5:53:55:32:82:99:
f0:52:b7:39:81:88:b2:ef:bb:8d:56:1c:62:3c:3f:11:4a:fb:
30:c6:02:ce:66:c0:a9:8c:66:23:77:de:69:ef:d7:5d:a8:0d:
ba:8a:a1:a4:aa:40:36:63:75:ca:c7:78:23:09:34:ed:df:5b:
92:70:7a:e9:96:e5:98:27:c3:39:73:81:44:3c:59:11:61:09:
ee:d6:c0:4f:39:bd:4f:10:e8:8a:d4:84:31:b4:5d:e9:7b:af:
38:5a:49:97:3c:c0:bd:06:1b:18:ea:60:8e:ab:91:0a:b1:88:
0b:75:be:89:e3:62:7f:7b:8c:95:90:99:4d:24:5b:98:08:08:
ba:7e:94:64:b3:04:0d:9f:06:69:ad:49:6d:fd:35:92:96:4b:
1d:00:db:bf:7c:62:c5:fd:f1:39:cb:b2:ce:08:3f:bc:55:fe:
49:a4:2c:b3:a4:ad:c9:94:31:3c:39:36:c6:64:f9:ff:08:a1:
0d:ce:5a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:27 2025 by rpki-client